The repository is backed by an organization, has tests, release notes, dependency scanning, and a matching source tree. Maintenance is intermittent, with no commits in three months, and both workflows use broad write permissions with unpinned actions.
68%
Total Score
75
100
89
67
Post-install and post-update scripts add install-time behavior that consumers must account for, creating a modest dependency and reproducibility concern.
Only 3 releases since March 2020, with no release in the last 12 months and a median interval of about 823 days, indicating a slow maintenance cadence.
No commits and no active maintainers were recorded in the last three months, a concrete sign of currently inactive development.
There are 2 open issues and 4 open pull requests, with no new issues or closed issues in the last month, suggesting limited current project activity.
The repository has only 3 stars and 1 fork, providing little external adoption evidence; popularity is supporting evidence rather than a health verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/event-loop Version ^1.5 | — | — |
wyrihaximus/metrics Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.